The latest tagged release receives security fixes.
Please do not open a public issue for security problems. Report them privately via GitHub's security advisories or by emailing matthewjohncoleman@gmail.com.
You will get an acknowledgement within a few days, and a fix or mitigation plan once the report is confirmed.